Consumer Health Data Privacy Policy (Washington and Nevada)

Effective date: November 11, 2026

This Consumer Health Data Privacy Policy applies to consumers in Washington and Nevada and to anyone whose consumer health data is collected in Washington. It explains how Salt & Sugar Club, operated by Golden Egg Marketing LLC ("we", "us"), collects, uses and shares consumer health data, as required by Washington's My Health My Data Act and Nevada law. It adds to our Privacy Policy. Where the two differ for consumer health data, this policy controls.

What consumer health data means here. Consumer health data is personal information that is linked or reasonably linkable to you and that identifies your past, present or future physical or mental health status. We sell blood glucose meters, test strips and related products, so the fact that you viewed or bought them, or joined our membership, and anything that could be inferred from that, is consumer health data. We do not ask you health questions, and we do not collect biometric data, genetic data or precise location. If you tell us about a health condition when you contact customer support, that is consumer health data too.

Categories of consumer health data we collect. (1) The products you view, add to your cart, buy, return or cancel, including your membership and its tier. (2) Inferences that could be drawn from those products. (3) Health information you choose to give us when you contact customer support by email, phone or chat.

Why we collect and use it. Only to: process and fulfill your order and any subscription you choose; take payment and screen orders for fraud; provide customer support, returns, refunds and cancellations; handle chargebacks and disputes; keep records required by law; and comply with legal obligations. We collect it only to provide the products and services you ask for. We do not use consumer health data for advertising. We send Washington and Nevada consumers only the member emails they sign up for, and no other marketing.

Sources. From you, when you use our website, buy from us or contact us; automatically from your browser or device when you use our website; and from service providers that process information for us.

Categories of consumer health data we share, and with whom. We share the categories above only with processors that act on our instructions under a written contract, and only as needed for the purposes above. Those processors are: payment processors and the payment gateway; our order management system; fulfillment and shipping providers; customer support providers, including an automated phone assistant; chargeback and fraud prevention services; website hosting and security providers; and an order tracking platform that records which link brought you to our website. We do not share consumer health data with advertising platforms, advertising networks, affiliate marketing networks or publishers.

Affiliates. We do not share consumer health data with any affiliate. If that changes, we will list each affiliate here by name before we share.

Sale. We do not sell consumer health data.

Your rights. You have the right to:

(a) confirm whether we collect, share or sell your consumer health data, and get access to it, including a list of every third party and affiliate with whom we have shared it and an active email address or other online way to contact each of them;

(b) withdraw any consent you have given for us to collect or share your consumer health data;

(c) have your consumer health data deleted, including from our archives and backups, and have us tell every processor and third party with whom we shared it to delete it too;

(d) Nevada residents: ask us to stop collecting, sharing or selling your consumer health data.

We will not charge you, deny you products, or treat you differently for using these rights.

How to make a request. Email [email protected] with the subject line "Consumer Health Data Request". We will verify your request by matching information you give us, such as your name, email address and a recent order number, against our records. We will respond within 45 days of receiving your request. If we need more time, we may extend that once by up to 45 more days and will tell you why within the first 45 days. An authorized agent may make a request for you with your written permission.

Appeals. If we decline your request, you may appeal by replying to our decision or emailing [email protected] with the subject line "Appeal". We will answer your appeal in writing within 45 days, explaining what we did and why. If we deny your appeal, Washington residents may contact the Washington State Attorney General at https://www.atg.wa.gov/file-complaint, and Nevada residents may contact the Nevada Attorney General at https://ag.nv.gov/Complaints/File_Complaint/.

Security. We restrict access to consumer health data to the people and processors who need it for the purposes above, and we protect it with reasonable administrative, technical and physical safeguards.

Changes to this policy. If we change this policy in a material way, we will update the effective date and post the new policy on this page before the change takes effect. We will not use or share consumer health data in a materially different way, or with new categories of recipients, without first getting your consent where the law requires it.

Contact. Salt & Sugar Club, operated by Golden Egg Marketing LLC, 111 NE 1st St, FL 8 STE 318, Miami, FL 33132. Email: [email protected].